Microsoft Account
- Run Security Checkup
- Check all 2FA enabled options – Still up-to-date ?
- Check your personal account details – Your name, address, birthday, …
- Check access by third party apps and services – Remove unused or unknown connections
- Check all your devices – Remove unused or unknown devices
- Enable MFA with Microsoft Authenticator
- Backup your Microsoft Recovery Code – For example in KeePass2 (its required to restore the access to your account if you entered the password multiple times wrong)
- Disable Personalized Ads
iCloud Account
- Enable 2FA
- Check email and phone numbers
- Check your personal account details – Your name, address, birthday, …
- Check account recovery – Remove unknown entries
- Check accounty security for the MFA – Remove unknown devices
- Check app specific passwords – Remove all connections if you don’t use it
- Check family sharing – Remove unknown entries
- Check all devices – Remove unused or unknown devices
- Check “Hide my Email” and Forwards – Remove unknown entries
- Check legacy contacts – Still correct?
- Disable iCloud Analytics
- Disable Personalized Ads
Google Account
- Run Security Checkup
- Enable 2FA
- Enable 2FA for activity logs
- Check all devices – Remove unknown devices
- Check access by third party apps and services – Remove unused or unknown connections
- Check backups codes or third party API access – Remove them if you didn’t configured it
- Disable Personalized Ads
Sunrise Internet Modem / Router
- Enable Firewall – Don’t allow WAN to LAN access and just allow LAN to WAN with default protocols like HTTP, HTTPS, FTP, SFTP etc.
- Allow access to admin console only from 192.168.1.0/24
- Check time server – Default is: time.sunrise.net
- Check internal DNS – Default is only: 192.168.1.1
- Change password for the default admin – Default is: The same password like for the WiFi itself (which is anyway crap)
- Check the routings – Remove unknown IPs in the list
- Enable Guest WiFi for 2.4GHz & 5GHz
- Change names for the WiFi – Don’t use the same name WiFi name for the Guest WiFi like for the private one
- Update passwords for the private and guest WiFi – Keep it different
Please note that the checklist does not set include all points and is constantly being updated.
* Device stuff coming soon…